Remote Access VPN

[sultantzahir]

Hi ;

i would like to make IPsec (IKEv1) Remote Access VPN , for Remote Access VPN but i would like to know if i need to have license ?

we have Cisco ASA 5520  version 9.1 

what the CL i need to use to check the license ? and how many users for each license .

Thank you 

[Rahul Govindan]

You can use "sh vpn-sessiondb license-summary" to check the VPN available licenses on the box. You do not need license for ikev1 remote access using Cisco VPN client, but the client is no longer supported by Cisco. For Anyconnect remote access (SSL or ikev2), you need to purchase either Anyconnect Plus or Apex license.

[sultantzahir]

Hi Rahul ;

for  For Anyconnect remote access  ikev2 , did i need to use Pre shard-key or SSL certification ?

if you have documentation explain step buy step how to do the configuration ?

Thank you . 

[Rahul Govindan]

IKEv2 does not use pre-shared key. You can use either cert or AAA to authenticate the user. An example is give here:

http://www.cisco.com/c/en/us/support/docs/security/anyconnect-secure-mobility-client/113692-technote-anyconnect-00.html